CVE-2025-22457 - Vulnerability Details

Frequency

occurrences

First Seen

June 17, 2026

Last Seen

June 17, 2026

CVE-2025-22457 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed June 17, 2026; most recent activity June 17, 2026.

Related Threat Clusters

Critical Remote Code Execution Vulnerability Exploited by China-Nexus Actor
On April 3, 2025, Ivanti disclosed CVE-2025-22457, a critical buffer overflow vulnerability affecting Ivanti Connect Secure and other products. The vulnerability allows unauthenticated remote code execution, and…

2 articles · Updated June 17, 2026

Recent Intelligence Reports

China Nexus Exploiting Critical Ivanti Vulnerability — cloud.google.com · June 17, 2026
Rapid7 Analysis: CVE-2025 — Rapid7 · June 17, 2026

Related Entities

China-Nexus Unc5221 Malware Zero-day Exploit Ivanti Policy Secure China CVE-2023-46805 CVE-2023-4966 CVE-2024-21887 CVE-2025-0282 CWE-120 - Classic Buffer Overflow Cwe-122 - Heap-based Buffer Overflow

CVE-2025-22457 - Vulnerability Details

Entity Not Found

Related Threat Clusters

Recent Intelligence Reports

Related Entities

CVSS v3.1 Breakdown